update(cmake,userspace): bump libs and driver to latest master.

falcosecurity / falco

Cloud Native Runtime Security

https://falco.org

Apache License 2.0

7.29k stars 897 forks source link

update(cmake,userspace): bump libs and driver to latest master. #3263

Closed FedeDP closed 3 months ago

FedeDP commented 3 months ago

What type of PR is this?

/kind cleanup

Any specific area of the project related to this PR?

/area build

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Also, this PR cherrypicks https://github.com/falcosecurity/falco/commit/7efabb7243fd741464ef446b359a0ec3643af123 from release/0.38.x branch.

Does this PR introduce a user-facing change?:

NONE

FedeDP commented 3 months ago

/milestone 0.39.0

FedeDP commented 3 months ago

Seems like we have a failing test:

  TestFalco_Legacy_NonSudoSetuid

    legacy_test.go:2631: 
            Error Trace:    /home/runner/actions-runner/_work/_actions/falcosecurity/testing/main/legacy_test.go:2631
            Error:          Should be zero, but was 1
            Test:           TestFalco_Legacy_NonSudoSetuid

Rule is: https://github.com/falcosecurity/testing/blob/main/tests/data/rules/legacy.go#L2334 and it seems like the test expects no event triggered, instead we are triggering one.

poiana commented 3 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Andreagit97, FedeDP, LucaGuerra

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/falcosecurity/falco/blob/master/OWNERS)~~ [Andreagit97,FedeDP,LucaGuerra] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment